CVE-2004-0918: openpkg Resource Management Errors

CVSS: 5.0v2.0MediumModified

AliasesRHSA-2004:591DEBIAN-CVE-2004-0918

Published 21-10-2004Last modified 08-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2004-0918 is a medium (CVSS 5.0) Resource Management Errors vulnerability in openpkg. EPSS estimates a 15.83% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities.

Overall risk

23/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

15.83%

0%100%

Medium · -0.20 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

DSA-576-1

Timeline

21-10-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

15.83%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

-0.20 pp

From 16.03% on 19-09-2026

19-09-202619-10-2026

EPSS score

15.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Redhat3 products

fedora_corecore_2.0
squid< 7:2.5.STABLE3-6.3E.2
squid-debuginfo< 7:2.5.STABLE3-6.3E.2

Debian1 product

squid< 2.5.7

Openpkg1 product

openpkg2.1 | 2.2 | current

Squid1 product

squid2.0_patch2 | 2.1_patch2 | 2.3_.stable4 | 2.3_stable5 | 2.4 | 2.4_.stable2 | 2.4_.stable6 | 2.4_stable7 | 2.5_.stable1 | 2.5_stable3 | 2.5_stable4 | 2.5_.stable5 | 2.5_.stable6 | 3.0_pre1 | 3.0_pre2 | 3.0_pre3

Trustix1 product